Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #964748 > unrolled thread
| Started by | Constantin <constantin_@list.ru> |
|---|---|
| First post | 2019-07-15 23:50 +0200 |
| Last post | 2019-07-19 20:00 +0200 |
| Articles | 5 — 3 participants |
Back to article view | Back to linux.debian.bugs.dist
Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile Constantin <constantin_@list.ru> - 2019-07-15 23:50 +0200
Bug#932150: [Pkg-privacy-maintainers] Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile intrigeri <intrigeri@debian.org> - 2019-07-19 16:50 +0200
Bug#932150: Fwd: Re[2]: [Pkg-privacy-maintainers] Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile Constantin Dunayev <constantin_@list.ru> - 2019-07-19 18:10 +0200
Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile Constantin Dunayev <constantin_@list.ru> - 2019-07-19 20:00 +0200
Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile Constantin <constantin_@list.ru> - 2019-07-19 20:00 +0200
| From | Constantin <constantin_@list.ru> |
|---|---|
| Date | 2019-07-15 23:50 +0200 |
| Subject | Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile |
| Message-ID | <ykh17-89Y-3@gated-at.bofh.it> |
Package: ricochet-im
Version: 1.1.4-3
Severity: important
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
ricochet doesn't save settings, contacts, etc.
~/.local/share/Ricochet/ricochet/ricochet.json is empty
* What exactly did you do (or not do) that was effective (or
ineffective)?
ln -s /etc/apparmor.d/usr.bin.ricochet /etc/apparmor.d/disable/
cd /etc/apparmor.d
apparmor_parser -R usr.bin.ricochet
* What was the outcome of this action?
ricochet works as expected, saving settings
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: 10.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=ru_UA.UTF-8, LC_CTYPE=ru_UA.UTF-8 (charmap=UTF-8), LANGUAGE=ru_UA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages ricochet-im depends on:
ii libc6 2.28-10
ii libgcc1 1:8.3.0-6
ii libgl1 1.1.0-1
pn libprotobuf17 <none>
ii libqt5core5a 5.11.3+dfsg1-1
ii libqt5gui5 5.11.3+dfsg1-1
pn libqt5multimedia5 <none>
ii libqt5network5 5.11.3+dfsg1-1
ii libqt5qml5 5.11.3-4
ii libqt5quick5 5.11.3-4
ii libqt5widgets5 5.11.3+dfsg1-1
ii libssl1.1 1.1.1c-1
ii libstdc++6 8.3.0-6
ii libubsan1 8.3.0-6
pn qml-module-qtmultimedia <none>
ii qml-module-qtquick-controls 5.11.3-2
ii qml-module-qtquick-dialogs 5.11.3-2
ii tor 0.3.5.8-1
ricochet-im recommends no packages.
ricochet-im suggests no packages.
-- no debconf information
[toc] | [next] | [standalone]
| From | intrigeri <intrigeri@debian.org> |
|---|---|
| Date | 2019-07-19 16:50 +0200 |
| Subject | Bug#932150: [Pkg-privacy-maintainers] Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile |
| Message-ID | <ylCmS-KT-3@gated-at.bofh.it> |
| In reply to | #964748 |
[Multipart message — attachments visible in raw view] — view raw
Hi,
Given Buster shipped with AppArmor enabled by default, arguably this
bug should be RC. I confirm this bug and adding these rules should fix
this:
owner @{HOME}/.local/share/Ricochet/ rw,
owner @{HOME}/.local/share/Ricochet/** mrwlk,
Constantin, can you please try this out? You'll need to reload the
profile after modifying it:
sudo apparmor_parser -r /etc/apparmor.d/usr.bin.ricochet
Now, on a current Debian sid default GNOME (+ Wayland) desktop, the
profile denies tons of other stuff which triggers tons of noise in the
logs. The attached profile fixes some (not all) of it but I'm not
familiar enough with Ricochet to tell whether the denied access should
be allowed or silently denied (with "deny" rules) so I'll let folks
more familiar with Ricochet look into the fine details — and that
should be for another bug anyway.
[toc] | [prev] | [next] | [standalone]
| From | Constantin Dunayev <constantin_@list.ru> |
|---|---|
| Date | 2019-07-19 18:10 +0200 |
| Subject | Bug#932150: Fwd: Re[2]: [Pkg-privacy-maintainers] Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile |
| Message-ID | <ylDCh-1FS-3@gated-at.bofh.it> |
| In reply to | #964748 |
[Multipart message — attachments visible in raw view] — view raw
Кому: intrigeri <intrigeri@debian.org>
Дата: Пятница, 19 июля 2019, 18:57 +03:00
Тема: Re[2]: [Pkg-privacy-maintainers] Bug#932150: ricochet-im doesn't save user preferences due to broken(?) apparmor profile
Hi,
Ricochet with new profile seems working as expected, but there are still some 'DENIED' messages in syslog from apparmor
Jul 19 18:50:43 horse kernel: [ 1559.190204] audit: type=1400 audit(1563551443.503:29): apparmor="STATUS" operation="profile_replace" info="s
ame as current profile, skipping" profile="unconfined" name="/usr/bin/ricochet" pid=7996 comm="apparmor_parser"
Jul 19 18:50:57 horse kernel: [ 1573.503100] audit: type=1400 audit(1563551457.815:30): apparmor="DENIED" operation="open" profile="/usr/bin/
ricochet" name="/proc/sys/kernel/random/boot_id" pid=8045 comm="ricochet" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 19 18:50:57 horse kernel: [ 1573.527617] audit: type=1400 audit(1563551457.843:31): apparmor="DENIED" operation="open" profile="/usr/bin/
ricochet" name="/etc/ssl/openssl.cnf" pid=8051 comm="tor" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 19 18:51:15 horse kernel: [ 1591.410341] audit: type=1400 audit(1563551475.723:32): apparmor="DENIED" operation="open" profile="/usr/bin/
ricochet" name="/proc/sys/kernel/random/boot_id" pid=8109 comm="ricochet" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Jul 19 18:51:15 horse kernel: [ 1591.426174] audit: type=1400 audit(1563551475.739:33): apparmor="DENIED" operation="open" profile="/usr/bin/
ricochet" name="/etc/ssl/openssl.cnf" pid=8115 comm="tor" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
>Пятница, 19 июля 2019, 17:41 +03:00 от intrigeri < intrigeri@debian.org >:
>
>Hi,
>
>Given Buster shipped with AppArmor enabled by default, arguably this
>bug should be RC. I confirm this bug and adding these rules should fix
>this:
>
> owner @{HOME}/.local/share/Ricochet/ rw,
> owner @{HOME}/.local/share/Ricochet/** mrwlk,
>
>Constantin, can you please try this out? You'll need to reload the
>profile after modifying it:
>
> sudo apparmor_parser -r /etc/apparmor.d/usr.bin.ricochet
>
>Now, on a current Debian sid default GNOME (+ Wayland) desktop, the
>profile denies tons of other stuff which triggers tons of noise in the
>logs. The attached profile fixes some (not all) of it but I'm not
>familiar enough with Ricochet to tell whether the denied access should
>be allowed or silently denied (with "deny" rules) so I'll let folks
>more familiar with Ricochet look into the fine details — and that
>should be for another bug anyway.
>
Best regards, --
Constantin Dunayev
[toc] | [prev] | [next] | [standalone]
| From | Constantin Dunayev <constantin_@list.ru> |
|---|---|
| Date | 2019-07-19 20:00 +0200 |
| Message-ID | <ylFkJ-2wP-13@gated-at.bofh.it> |
| In reply to | #964748 |
[Multipart message — attachments visible in raw view] — view raw
I confirm, that Ricochet is working with these changes to it's apparmor profile, despite some 'DENIED' messages in syslog. Seems, this bug is fixed Best regards, -- Constantin Dunayev
[toc] | [prev] | [next] | [standalone]
| From | Constantin <constantin_@list.ru> |
|---|---|
| Date | 2019-07-19 20:00 +0200 |
| Message-ID | <ylFkK-2wP-15@gated-at.bofh.it> |
| In reply to | #964748 |
Package: ricochet-im Version: 1.1.4-3 Followup-For: Bug #932150 Dear Maintainer, I confirm, that Ricochet is working with these changes to it's apparmor profile, despite some 'DENIED' messages in syslog. Seems, this bug is fixed Thanks. -- System Information: Debian Release: 10.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.19.0-5-amd64 (SMP w/2 CPU cores) Locale: LANG=ru_UA.UTF-8, LC_CTYPE=ru_UA.UTF-8 (charmap=UTF-8), LANGUAGE=ru_UA.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages ricochet-im depends on: ii libc6 2.28-10 ii libgcc1 1:8.3.0-6 ii libgl1 1.1.0-1 pn libprotobuf17 <none> ii libqt5core5a 5.11.3+dfsg1-1 ii libqt5gui5 5.11.3+dfsg1-1 pn libqt5multimedia5 <none> ii libqt5network5 5.11.3+dfsg1-1 ii libqt5qml5 5.11.3-4 ii libqt5quick5 5.11.3-4 ii libqt5widgets5 5.11.3+dfsg1-1 ii libssl1.1 1.1.1c-1 ii libstdc++6 8.3.0-6 ii libubsan1 8.3.0-6 pn qml-module-qtmultimedia <none> ii qml-module-qtquick-controls 5.11.3-2 ii qml-module-qtquick-dialogs 5.11.3-2 ii tor 0.3.5.8-1 ricochet-im recommends no packages. ricochet-im suggests no packages. -- Configuration Files: /etc/apparmor.d/usr.bin.ricochet changed [not included] -- no debconf information
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.bugs.dist
csiph-web